How we handle your information

This is the whole of it. If something here is unclear, write to privacy@muniment.xyz and a person will answer.

Muniment is run by the operator of muniment.xyz. Writing to that address reaches us.

What we hold

Your account. Your email address, and when the account was made. There is no password, because we never ask for one — we email you a link instead.

Your sites. The name, the web address, the plan, and when it was made.

Your documentation. Every page you write, and every saved version of it. Versions are kept for as long as the site exists. We keep them all; your plan decides how far back you can look and how far back you can undo.

Who did what. Each saved version records who saved it, so your team can see it. That record stays even after somebody leaves.

What happened. A log of things like *a page was saved*, *a site was published*, *a limit was reached*. It is kept for 12 months and then deleted. It holds no page content, no email addresses and nothing that could be used to sign in.

Messages we sent you. Which message, when, and to which address.

Payments. If you pay us, we hold your plan, the country you gave when you paid, and the dates. We never see or store your card. The payment company handles that on their own systems.

What we do not hold

  • Your card details.
  • Your conversations with Claude. We only ever receive what a request asks us to do.
  • Anything from your Claude account other than your sign-in identity and the sites you

chose to connect.

What we do with it

We use it to run the product: to serve your documentation to readers, to let your team work on it, to bill you if you are paying, and to write to you about your own account.

We do not sell it. We do not share it for advertising. We do not train anything on it. Muniment sends nothing to any model provider, ever — the model you talk to is your own.

Who else touches it

A short list, and each one is here because the product cannot work without it:

WhoWhat they doWhat they see
Our hosting providerRuns the servers and the databaseEverything, as the place it is stored
Our storage and delivery providerServes published pages to readers, and issues the security certificate for your addressPublished pages, and the addresses they are served on
Our email providerDelivers sign-in links, receipts and noticesYour address and the message
Our payment companyTakes paymentYour name, your card and the country you gave

Cookies

We set three cookies. Two of them sign you in, and the third remembers which notes you have already read. We set none for advertising and none for analytics, and no other company sets one through us.

The cookies page lists all three, what each is for, and how long each lasts.

Published pages are public

Anything you publish is meant to be read by anyone. Do not put anything private in it. Pages you have not published are not served to anyone.

How long we keep things

  • Your documentation: while the site exists.
  • The activity log: 12 months.
  • Your account and sites after you ask us to delete them: 30 days, then everything is

removed. We write to you twice before that happens, at least seven days apart, so a message that goes astray is not the end of it.

  • Records we have to keep for tax or accounting: as long as the law requires.

What you can ask for

  • A copy of everything we hold about you. Your account page has it.
  • A copy of your documentation. Your site page has it, on every plan, at any time —

including while a site is paused and after you stop paying.

  • Deletion. Your account page. It asks you to type your email address first, because

it cannot be undone.

  • Correction. Write to us.

We answer within 30 days.

Where your information is

On servers in the European Union and the United States. Our providers move information between their own regions to keep the product working.

Children

Muniment is for work. It is not for anyone under 16, and we do not knowingly hold anything about a child.

If something goes wrong

If information is lost or reached by somebody who should not have it, we will tell the people affected and the relevant authority, without unnecessary delay.

Changes to this page

If we change something that matters, we will write to account holders before it takes effect. Small corrections happen on this page without a notice.

Last updated: 8 September 2026.